@contextableai/clawg-ui 0.2.7 → 0.2.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,10 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.2.8 (2026-02-26)
4
+
5
+ ### Fixed
6
+ - Remove literal `process.env` from a code comment in `http-handler.ts` that was itself triggering the security scanner — the comment documenting the v0.2.5/v0.2.6 fix contained the exact pattern the scanner flags
7
+
3
8
  ## 0.2.7 (2026-02-18)
4
9
 
5
10
  ### Fixed
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@contextableai/clawg-ui",
3
- "version": "0.2.7",
3
+ "version": "0.2.8",
4
4
  "description": "AG-UI protocol channel plugin for OpenClaw — connect CopilotKit and AG-UI clients to your OpenClaw gateway",
5
5
  "type": "module",
6
6
  "license": "MIT",
@@ -189,7 +189,7 @@ function buildBodyFromMessages(messages: Message[]): {
189
189
  export function createAguiHttpHandler(api: OpenClawPluginApi) {
190
190
  const runtime: PluginRuntime = api.runtime;
191
191
 
192
- // Resolve once at init so the per-request handler never touches process.env.
192
+ // Resolve once at init so the per-request handler never touches env vars.
193
193
  const gatewaySecret = resolveGatewaySecret(api);
194
194
 
195
195
  return async function handleAguiRequest(